Archive
April 2003
Vulnerabilities first published in this month (UTC), newest first.
105 results · Clear filters · Feed
-
Unscored —
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows …
-
Unscored —CVE-2003-0215 Public exploit
SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via …
-
Unscored —
Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbit…
-
Unscored —
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length fi…
-
Unscored —
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to exe…
-
Unscored —CVE-2003-0211 Public exploit
Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service (memory consumption) via a large numb…
-
Unscored —
The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and In…
-
Unscored —
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x ver…
-
Unscored —CVE-2003-0171 Public exploit
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows…
-
Unscored —CVE-2003-0203 Public exploit
Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP …
-
Unscored —
Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the …
-
Unscored —
A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) vi…
-
Unscored —
Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a l…
-
Unscored —CVE-2001-0748 Public exploit
Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary…
-
Unscored —CVE-2001-0873 Public exploit
uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileg…
-
Unscored —
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitr…
-
Unscored —CVE-2001-1036 Public exploit
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filenam…
-
Unscored —CVE-2001-1303 Public exploit
The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configur…
-
Unscored —CVE-2001-1106 Public exploit
The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program …
-
Unscored —CVE-2001-1291 Public exploit
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provid…
-
Unscored —CVE-2001-1334 Public exploit
Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitra…
-
Unscored —CVE-2002-0946 Public exploit
Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files v…
-
Unscored —CVE-2002-0658 Public exploit
OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via …
-
Unscored —
Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra s…
-
Unscored —CVE-2002-0813 Public exploit
Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to c…
-
High 7.8
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to oth…
KEV Mar 3, 2022 -
Unscored —
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers t…
-
Unscored —CVE-2002-0542 Public exploit
mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode…
-
Unscored —
LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) v…
-
Unscored —
Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2002-0892 Public exploit
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web …
-
Unscored —
Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary…
-
Unscored —
Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to exe…
-
Unscored —CVE-2002-0953 Public exploit
globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows rem…
-
Unscored —CVE-2002-0824 Public exploit
BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specifi…
-
Unscored —
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local user…
-
Unscored —
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large n…
-
Unscored —CVE-2002-0887 Public exploit
scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attac…
-
Unscored —CVE-2002-0553 Public exploit
Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges…
-
Unscored —CVE-2002-0995 Public exploit
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action para…